Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/98d620-1599-4863-9629-356505303c49/1/Bs8Z4Ze9r5TmEA4OF4COE9SFT5w.mft
File: Bs8Z4Ze9r5TmEA4OF4COE9SFT5w.mft (raw, json)
Hash identifier: fX+Jwt/UmvHGygd/y1PlUwZXTTwTI05IZDqd9BGcSgw=
Subject key identifier: 78:AE:D1:F0:26:FA:6B:D1:6C:61:DD:AD:D3:7B:DA:4B:71:96:CD:83
Authority key identifier: 06:CF:19:E1:97:BD:AF:94:E6:10:0E:0E:17:80:8E:13:D4:85:4F:9C
Certificate issuer: /CN=06cf19e197bdaf94e6100e0e17808e13d4854f9c
Certificate serial: 0194BBCDDA6626E9232AAFA2F70784FBA4AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bs8Z4Ze9r5TmEA4OF4COE9SFT5w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/98d620-1599-4863-9629-356505303c49/1/Bs8Z4Ze9r5TmEA4OF4COE9SFT5w.mft
Manifest number: 0F84
Signing time: Fri 31 Jan 2025 10:00:17 +0000
Manifest this update: Fri 31 Jan 2025 10:00:17 +0000
Manifest next update: Sat 01 Feb 2025 10:00:17 +0000
Files and hashes: 1: Bs8Z4Ze9r5TmEA4OF4COE9SFT5w.crl (hash: XJx5tb+rppPlsuAqWHs7XR2Uh8/ORw4hR/YtZxKe1TA=)
2: xewq6JL7wUlqxM-_oFBJPbWzZVw.roa (hash: gGSE6S3F5awwRunu5t2dFHcZlnB1N7Se7jB7GkE6lSg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:da:66:26:e9:23:2a:af:a2:f7:07:84:fb:a4:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06cf19e197bdaf94e6100e0e17808e13d4854f9c
Validity
Not Before: Jan 31 10:00:17 2025 GMT
Not After : Feb 1 10:00:17 2025 GMT
Subject: CN=78aed1f026fa6bd16c61ddadd37bda4b7196cd83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:f8:21:63:a0:09:e7:48:52:e7:4c:40:b3:58:
48:2a:fa:59:83:83:8d:0f:28:44:7b:c7:53:37:6b:
4e:53:1e:4c:53:a9:c3:58:37:56:5f:6e:36:d7:bd:
51:d0:88:e6:22:0b:31:01:0c:57:4d:9a:4b:f6:7b:
c2:a2:27:3d:8d:3a:50:a9:de:29:f4:4e:ac:9c:e4:
c3:06:59:0c:fa:86:08:85:e8:f1:4c:83:2a:f9:8b:
50:05:4b:3c:ad:e0:e6:10:6b:41:62:e4:76:0b:13:
ca:b9:a3:b6:cd:30:6d:9d:a2:38:a2:d3:9e:d3:d7:
e5:5b:d4:ac:3d:13:d1:87:1c:bb:da:d2:63:15:32:
79:ee:4a:27:0e:be:3d:4f:e7:bc:b8:bb:c2:eb:88:
f3:ad:3f:c1:0d:88:93:5f:6b:30:f7:18:7b:16:7a:
41:18:b2:31:1a:75:85:b5:29:bb:92:9c:55:01:05:
10:45:0e:54:f0:43:da:51:1b:79:a6:bc:62:ed:ce:
ec:4a:d8:a3:1e:b3:95:73:88:a5:75:ee:9d:03:40:
dc:4c:2c:2b:9b:bd:57:f4:ce:2c:37:66:3f:0f:0f:
13:ef:06:67:60:8f:c3:36:63:25:d0:ca:50:58:f6:
99:38:73:1d:79:a6:ed:a0:84:ff:2c:5d:e2:e3:22:
5b:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:AE:D1:F0:26:FA:6B:D1:6C:61:DD:AD:D3:7B:DA:4B:71:96:CD:83
X509v3 Authority Key Identifier:
keyid:06:CF:19:E1:97:BD:AF:94:E6:10:0E:0E:17:80:8E:13:D4:85:4F:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bs8Z4Ze9r5TmEA4OF4COE9SFT5w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/98d620-1599-4863-9629-356505303c49/1/Bs8Z4Ze9r5TmEA4OF4COE9SFT5w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/98d620-1599-4863-9629-356505303c49/1/Bs8Z4Ze9r5TmEA4OF4COE9SFT5w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:72:38:f4:b7:ef:2f:d7:2f:4a:a4:2d:12:02:98:42:eb:05:
9a:b7:a6:94:19:a9:c9:7c:c5:1b:20:b8:cd:b4:6b:f7:7f:f5:
aa:8b:bf:54:b7:10:78:85:d9:f1:96:f7:79:39:2f:8f:93:90:
03:ce:ba:37:79:4e:5d:e6:ea:d1:5d:41:2b:11:22:ec:0d:49:
e0:fb:aa:72:c6:d0:6f:de:57:18:ce:b1:94:3f:c3:3e:e3:9a:
ff:76:9d:82:db:e2:6c:cd:6b:2f:b8:01:25:f1:af:49:a8:f2:
f0:87:31:8c:e5:4a:44:05:9a:b2:7b:8c:38:37:13:a6:0c:f2:
44:b4:cc:a5:c3:68:43:69:15:3f:49:9b:57:6e:7e:60:b4:b7:
39:d1:41:5a:97:1a:99:f5:f5:f3:ad:e0:9c:b7:f2:e0:68:73:
61:8e:81:bf:fb:f4:ed:2f:fe:18:c4:18:86:5e:3a:3b:71:f2:
37:6e:aa:3d:16:12:d2:38:c6:30:58:f1:34:ba:ae:50:e2:26:
5d:48:2b:78:77:32:58:29:4a:a8:b7:b1:c5:be:e5:61:52:ba:
f5:ba:4f:bf:77:aa:46:d9:29:20:ff:6c:86:64:87:8b:29:b5:
e8:cd:be:51:8a:6f:d6:c4:4c:91:7e:b2:2a:4f:1a:58:9c:c6:
4d:24:ab:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 10:36:44 2025 by rpki-client